AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2026-23687

HIGH · CVSS 8.8 EPSS 0.46%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2026-02-10 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 8.8. Exploitation may require the attacker to be authenticated.

CVE
CVE-2026-23687
Severity
HIGH
CVSS
8.8
EPSS
0.46%

Original NVD Description

SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated attacker with normal privileges to obtain a valid signed message and send modified signed XML documents to the verifier. This may result in acceptance of tampered identity information, unauthorized access to sensitive user data and potential disruption of normal system usage.

Related CVEs

Other vulnerabilities affecting the same vendor(s)